Manages TLS certificate and encryption key lifecycle across all tiers. Self-Hosted covers certificate expiry monitoring, node/CA/client cert rotation, and Kubernetes cert management. Advanced/BYOC covers managed TLS (no action) and CMEK (Customer-Managed Encryption Key) rotation in your KMS. Standard and Basic have fully managed TLS and encryption with no customer action.
Install
npx skills add cockroachdb/claude-plugin --skill managing-certificates-and-encryptionnpx skills add cockroachdb/claude-plugin --skill managing-certificates-and-encryption -a claude-code -gnpx skills add cockroachdb/claude-plugin --skill managing-certificates-and-encryption -a codex -ggemini skills install https://github.com/cockroachdb/claude-plugin.git --path skills/cockroachdb-operations-and-lifecycle/managing-certificates-and-encryptiongh skill install cockroachdb/claude-plugin managing-certificates-and-encryptiongit clone --depth 1 https://github.com/cockroachdb/claude-plugin /tmp/cockroachdb__claude-plugin
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/cockroachdb__claude-plugin/skills/cockroachdb-operations-and-lifecycle/managing-certificates-and-encryption ~/.claude/skills/managing-certificates-and-encryption # Claude Code
cp -R /tmp/cockroachdb__claude-plugin/skills/cockroachdb-operations-and-lifecycle/managing-certificates-and-encryption ~/.agents/skills/managing-certificates-and-encryption # Codex, Cursor, Gemini CLI, Copilot, OpenCode